$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft File: z-BxqXL9eKZ_bT7VamGENAqz46Y.mft (raw, json) Hash identifier: o4//Uet6Hd3siEz09FO2S4f+p8PXSmLQXwgzGLOnMCA= Subject key identifier: 18:9B:17:EA:61:A9:9F:3B:64:E7:46:E5:84:A4:3A:D3:67:13:19:D2 Authority key identifier: CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 Certificate issuer: /CN=A916C4A5/serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft Manifest number: 8C Signing time: Mon 11 Aug 2025 06:47:11 +0000 Manifest this update: Mon 11 Aug 2025 06:47:11 +0000 Manifest next update: Mon 18 Aug 2025 06:47:11 +0000 Files and hashes: 1: z-BxqXL9eKZ_bT7VamGENAqz46Y.crl (hash: LVooaVyTJbHLUvQ3kDtsqYxkGzxmxH2/jPk1ebp8EeE=) 2: FB01C0A4A24B11EFA8802F31C4F9AE02.roa (hash: dlLY0c4zcx4nsoESDYqmPB7RubZLl/a17nHw+0+FjyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4A5, serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Validity Not Before: Aug 11 06:47:11 2025 GMT Not After : Aug 18 06:47:11 2025 GMT Subject: CN=689991ef-bfbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cf:37:a3:a4:0d:94:18:ee:5e:9e:8b:6b:22: 81:00:29:fc:a6:dd:4b:19:93:01:51:93:28:d4:4e: 74:ab:81:7e:00:73:b5:d5:37:71:a4:b0:48:f1:f8: 80:1b:28:15:75:53:d1:c1:e9:24:af:dd:ed:c2:a4: 28:e7:bd:7b:1b:65:dd:32:ba:76:ff:cc:79:50:fb: 1c:ca:d8:05:87:0b:f1:64:34:89:ba:08:f9:d4:1e: f7:1b:11:55:69:c9:a5:c1:f8:4d:f3:86:a4:cb:77: 6f:df:34:d6:9f:44:b4:e6:5a:7d:d0:1a:28:bc:eb: bc:41:2c:19:73:68:d7:08:59:ad:7d:c5:69:c3:09: 52:d2:fa:d2:ed:e8:ed:ac:46:ae:51:66:50:fe:cb: de:b8:c7:52:8c:e8:31:2e:a8:b4:f7:80:0d:cb:aa: d1:85:55:6d:2b:25:45:ed:9c:70:93:38:29:cc:2c: 74:a8:ff:19:69:97:49:22:0a:a3:87:e5:9d:0e:05: b7:da:2c:84:56:50:74:a9:73:e6:b8:4b:b0:8f:11: 54:be:57:31:d4:04:1e:bd:ee:e4:b9:b8:c7:f7:8b: 9f:ef:95:3a:85:a3:ce:f7:9c:af:1f:5b:1f:f7:80: bb:e1:cf:b2:11:92:20:c2:09:d6:3a:19:f6:74:30: 7e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:9B:17:EA:61:A9:9F:3B:64:E7:46:E5:84:A4:3A:D3:67:13:19:D2 X509v3 Authority Key Identifier: keyid:CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:cd:16:33:1f:7a:7c:f1:65:d9:b1:3d:35:33:c5:5b:98:18: cf:0c:82:c5:f4:6f:4e:dc:30:06:6e:54:b3:c4:f4:e9:60:e3: ec:81:7e:57:6e:7b:0d:3a:52:fc:90:f1:d0:07:a0:31:45:2b: eb:ad:89:ff:c2:66:a3:68:88:72:f4:4e:98:79:b4:57:69:8c: e5:67:69:d1:b3:64:0b:98:03:79:07:8a:b3:f7:b0:7d:8d:e5: 92:a2:49:a5:31:11:f9:64:3f:7b:b5:68:09:1a:d3:b3:31:74: 5b:cc:97:73:77:3d:95:ae:c5:5a:c3:c2:0c:d9:c9:92:54:73: b2:21:86:cd:46:99:82:fc:dd:f4:de:ca:c2:5b:9d:e5:9b:ed: 02:0c:9f:24:e6:37:b1:10:4a:c6:81:9a:a2:7e:f7:f4:6c:be: 1c:ba:fa:ea:2b:3d:a2:da:53:d0:19:19:1d:28:7e:5e:8c:17: a4:a3:c3:32:c0:47:cc:8b:da:b0:47:79:ae:44:28:6a:a4:f9: 1e:95:23:60:90:ea:c0:85:92:c8:57:eb:fd:a8:cd:0d:e3:04: b6:38:af:05:f1:f9:43:09:50:b6:32:9a:6b:e3:69:08:59:db: 3c:38:3b:90:96:69:18:7f:bd:10:18:35:c1:e2:a0:34:ec:61: 03:f2:d9:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM0QTUxMTAvBgNVBAUTKENGRTA3MUE5NzJGRDc4QTY3RjZEM0VENTZBNjE4NDM0 MEFCM0UzQTYwHhcNMjUwODExMDY0NzExWhcNMjUwODE4MDY0NzExWjAYMRYwFAYD VQQDEw02ODk5OTFlZi1iZmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs883o6QNlBjuXp6LayKBACn8pt1LGZMBUZMo1E50q4F+AHO11TdxpLBI8fiA GygVdVPRwekkr93twqQo5717G2XdMrp2/8x5UPscytgFhwvxZDSJugj51B73GxFV acmlwfhN84aky3dv3zTWn0S05lp90BoovOu8QSwZc2jXCFmtfcVpwwlS0vrS7ejt rEauUWZQ/sveuMdSjOgxLqi094ANy6rRhVVtKyVF7ZxwkzgpzCx0qP8ZaZdJIgqj h+WdDgW32iyEVlB0qXPmuEuwjxFUvlcx1AQeve7kubjH94uf75U6haPO95yvH1sf 94C74c+yEZIgwgnWOhn2dDB+KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBibF+ph qZ87ZOdG5YSkOtNnExnSMB8GA1UdIwQYMBaAFM/gcaly/Ximf20+1WphhDQKs+Om MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRBNS9CRjUwRTg2MkEy MzQxMUVGOTc4QzhENkRDNEY5QUUwMi96LUJ4cVhMOWVLWl9iVDdWYW1HRU5BcXo0 NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3otQnhxWEw5ZUtaX2JUN1ZhbUdFTkFxejQ2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzRBNS9CRjUwRTg2MkEyMzQxMUVGOTc4QzhENkRDNEY5QUUwMi96LUJ4cVhMOWVL Wl9iVDdWYW1HRU5BcXo0NlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVzRYzH3p88WXZsT01M8VbmBjPDILF9G9O3DAGblSzxPTpYOPsgX5X bnsNOlL8kPHQB6AxRSvrrYn/wmajaIhy9E6YebRXaYzlZ2nRs2QLmAN5B4qz97B9 jeWSokmlMRH5ZD97tWgJGtOzMXRbzJdzdz2VrsVaw8IM2cmSVHOyIYbNRpmC/N30 3srCW53lm+0CDJ8k5jexEErGgZqifvf0bL4cuvrqKz2i2lPQGRkdKH5ejBeko8My wEfMi9qwR3muRChqpPkelSNgkOrAhZLIV+v9qM0N4wS2OK8F8flDCVC2Mppr42kI Wds8ODuQlmkYf70QGDXB4qA07GED8tlP -----END CERTIFICATE-----Generated at Mon Aug 11 13:21:30 2025 by rpki-client